Computer oriented record administration system

• US 20020083192A1
• Filed: 12/18/2001
• Published: 06/27/2002
• Est. Priority Date: 12/18/2000
• Status: Active Grant

• Current Assignee: Coranetsolutions Incorporated
• Original Assignee: Coranet Solutions, LLC
• Inventors: Alisuag, Cora
• Granted Patent: US 7,328,276 B2
• Time in Patent Office: Days
• US Class Current: 709/237
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A portable memory element containing encrypted data is operatively connected to a first client, and the person associated with the portable memory element provides passcode information necessary to access the encrypted data, wherein the passcode information can be either alphanumeric or biometric, e.g. a fingerprint. The first client communicates with a server, which returns a passkey if the passcode information is authentic for the portable memory element. The first user of the first client then communicates, via a separate communications path, the passkey to a second user of a second client also in communication with the server, who then provides the passkey to the server. If the passkey provided by the second user is valid, the server provides for communication between the first and second clients, and enables the second client to access the portable memory element.

Claims

1. A method of providing for a server on a computer, comprising

a. providing for communicating with a first client, wherein said first client performs a method comprising:

i. providing for reading a portable memory element;

ii. providing for obtaining passcode information necessary to access data from said portable memory element; and

iii. providing for authenticating said passcode information;

b. providing for providing a first passkey to said first client if said passcode information is authentic for said portable memory element;

c. providing for communicating with at least one second client;

d. providing for receiving a second passkey from said at least one second client; and

e. providing for enabling said at least one second client to communicate with said first client if said second passkey corresponds to said first passkey.

2. A method of providing for a server on a computer as recited in claim 1, wherein the operation of providing for communicating with a first client comprises providing for encrypting signals that are sent to said first client, and decrypting signals that are received from said first client.

3. A method of providing for a server on a computer as recited in claim 1, wherein said portable memory element comprises a memory card, a flash memory card or a SmartCard.

4. A method of providing for a server on a computer as recited in claim 1, wherein said data comprises medical information of a person who is capable of providing said passcode information necessary to access data from said portable memory element.

5. A method of providing for a server on a computer as recited in claim 1, wherein said passcode information comprises at least one fingerprint of a person associated with said portable memory element.

6. A method of providing for a server on a computer as recited in claim 1, wherein said passcode information comprises either alphanumeric information or biometric information provided by a person associated with said portable memory element.

7. A method of providing for a server on a computer as recited in claim 1, wherein said first client is mobile.

8. A method of providing for a server on a computer as recited in claim 1, further comprising providing for enabling said first client either to read information from, or to record information to, said portable memory device if said passcode information is authentic for said portable memory element.

9. A method of providing for a server on a computer as recited in claim 8, wherein said information from said first client comprises voice information, data from a medical instrument, data from a keyboard or keypad, or handwritten data.

10. A method of providing for a server on a computer as recited in claim 1, further comprising identifying a level of authority of said first client, and controlling access to said data responsive to said level of authority.

11. A method of providing for a server on a computer as recited in claim 1, further comprising providing for a first user associated with said first client to provide said first passkey to at least one second user associated with at least one second client so that said at least one second user can provide said second passkey that corresponds to said first passkey.

12. A method of providing for a server on a computer as recited in claim 1, wherein the operation of providing for communicating with a second client comprises providing for encrypting signals that are sent to said second client, and decrypting signals that are received from said second client.

13. A method of providing for a server on a computer as recited in claim 1, further comprising providing for enabling said at least one second client either to read information from, or to record information to, said portable memory device if said second passkey corresponds to said first passkey.

14. A method of providing for a server on a computer as recited in claim 1, further comprising providing for interfacing with a CORBAMED system.

15. A method of providing for a server on a computer as recited in claim 14, wherein said CORBAMED system comprises a Terminology Query Service server, a Clinical Observation Access Service server, and a Resource Access Decision server.

16. A method of providing for a server on a computer as recited in claim 15, further comprising providing for said first client to read at least one trait from said portable memory element and providing for receiving said at least one trait from said first client.

17. A method of providing for a server on a computer as recited in claim 16, further comprising communicating said at least one trait to said CORBAMED system and communicating data from said CORBAMED system corresponding to said at least one trait to at least one of said first client and said at least one second client.

18. A method of providing for a server on a computer as recited in claim 16, wherein said at least one trait is defined in accordance with a Health Level 7 (HL7) specification.

19. A method of providing for a server on a computer as recited in claim 16, further comprising storing information from either said first client or said at least one second client in at least one database operatively associated with said CORBAMED system.

20. A Personal Identification Service server of a CORBAMED system, comprising:

a. a means for communicating with a first client;

b. a means for receiving a first signal from said first client, wherein said first signal indicates if said first client is authorized to access a portable memory element provided that said portable memory element is operatively connected to said first client;

c. a means for providing a passkey to said first client if said first signal indicates that said first client is authorized to access said portable memory element;

d. a means for communicating with a second client;

e. a means for receiving a second signal from said second client; and

f. a means for providing for said second client to communicate with said first client if said second signal comprises a second passkey that corresponds to said first passkey.

21. A Personal Identification Service server of a CORBAMED system as recited in claim 20, further comprising a means for providing for said first client to either read information from, or record information to, said portable memory element if said first signal indicates that said first client is authorized to access said portable memory element.

22. A Personal Identification Service server of a CORBAMED system as recited in claim 20, further comprising a means for providing for said second client to either read information from, or record information to, said portable memory element if said second signal comprises a second passkey that corresponds to said first passkey.

24. A method of providing for a first client on a computer as recited in claim 23, further comprising providing for a first user associated with the first client to provide said first passkey to at least one second user associated with at least one second client.

25. A method of providing for a first client on a computer as recited in claim 23, wherein the operation of providing for communicating with a server comprises providing for encrypting signals that are sent to said server, and decrypting signals that are received from said server.

26. A method of providing for a first client on a computer as recited in claim 23, wherein said portable memory element comprises a memory card, a flash memory card or a SmartCard.

27. A method of providing for a first client on a computer as recited in claim 23, wherein said data comprises medical information of a person who is capable of providing said passcode information necessary to access data from said portable memory element.

28. A method of providing for a first client on a computer as recited in claim 23, wherein said passcode information comprises at least one fingerprint of a person associated with said portable memory element.

29. A method of providing for a first client on a computer as recited in claim 23, wherein said passcode information comprises either alphanumeric information or biometric information provided by a person associated with said portable memory element.

30. A method of providing for a first client on a computer as recited in claim 23, further comprising providing for either reading information from, or recording information to, said portable memory device if said passcode information is authentic for said portable memory element.

31. A method of providing for a first client on a computer as recited in claim 30, wherein said information from said first client comprises voice information, data from a medical instrument, data from a keyboard or keypad, or handwritten data.

32. A method of providing for a first client on a computer as recited in claim 23, further comprising identifying a level of authority, and controlling access to said data responsive to said level of authority.

23. A method of providing for a first client on a computer, comprising:

a. providing for communicating with a server;

b. providing for reading a portable memory element;

c. providing for obtaining passcode information necessary to access data from said portable memory element;

d. providing for authenticating said passcode information;

e. providing for receiving a first passkey from said server if said passcode information is authentic for said portable memory element; and

f. providing for communicating with at least one second client in communication with said server.

33. A first client computer system, comprising:

a. a computer;

b. a memory interface device operatively connected to said computer, wherein said memory interface device is capable of interfacing with a portable memory element;

c. a data input device operatively connected to said computer, wherein said data input device provides for entering passcode information necessary to access data on said portable memory element when said portable memory element is operatively connected to said memory interface device;

d. a communications interface operatively connected to said computer and to at least one other computer;

e. a memory, wherein said memory provides for storing an application program, wherein said application program provides for a method comprising;

i. providing for communicating via said communication interface with a server;

ii. providing for reading said portable memory element provided that said portable memory element is operatively connected to said memory interface device;

iii. providing for obtaining passcode information from said data input device necessary to access data from said portable memory element;

iv. providing for authenticating said passcode information;

v. providing for receiving a first passkey from said server if said passcode information is authentic for said portable memory element;

vi. providing for a first user associated with the first client to provide said first passkey to at least one second user associated with at least one second client computer system; and

vii. providing for communicating information via said communication interface with said at least one second client computer system in communication with said server.

34. A first client computer system as recited in claim 33, wherein said data input device comprises a fingerprint reader operatively connected to said computer, and the operation of obtaining passcode information from said data input device comprises reading at least one fingerprint with said fingerprint reader.

35. A first client computer system as recited in claim 33, wherein said communication interface is operatively connected to a computer network.

36. A first client computer system as recited in claim 35, wherein said communication interface comprises a wireless communication device.

37. A first client computer system as recited in claim 33, wherein said communication interface comprises a wireless communication device.

38. A first client computer system as recited in claim 33, further comprising providing for storing said information on said portable memory element.

39. A first client computer system as recited in claim 33, further comprising providing for reading stored information from said portable memory element and either displaying said stored information by a display operatively connected to said computer or communicating said stored information to said second client computer system.

40. A portable memory element, comprising a memory capable of being read from or written to by a computer provided that said memory is operatively connected to a first client computer system, wherein said memory is adapted to store passcode information as stored passcode information, and said memory provides for cooperating with said first client computer system that operates in accordance with a method comprising:

a. providing for communicating by said computer via a communication interface with a server;

b. providing for reading said portable memory element by said first client computer system provided that said memory is operatively connected to a memory interface device of said first client computer system;

c. providing for obtaining passcode information from a data input device operatively connected to said first client computer system, wherein said passcode information is necessary to access data from said memory;

d. providing for authenticating said passcode information by comparing said passcode information with said stored passcode information;

e. providing for receiving a first passkey from said server if said passcode information matches said stored passcode information;

f. providing for a first user associated with said first client computer system to provide said first passkey to at least one second user associated with at least one second client computer system; and

g. providing for communicating information via said communication interface with said at least one second client computer system in communication with said server.

41. A portable memory element as recited in claim 40, wherein the operation of obtaining passcode information from said data input device comprises reading at least one fingerprint with a fingerprint reader operatively connected to said first client computer system.

42. A portable memory element as recited in claim 40, further comprising providing for storing said information on said memory.

43. A portable memory element as recited in claim 40, further comprising providing for reading stored information from said memory and either displaying said stored information by a display operatively connected to said first client computer system or communicating said stored information to said second client computer system.